Plus: Millions of Android phones are vulnerable because of security-challenged apps, that message in your inbox might not have come from where it says it originated, and the link to that supposed government website might lead you right into a hacker’s trap